3 ms·
> (like fraud detection or monitoring your infra) reCAPTCHA, in this case can be consider as "fraud detection". Can we do it without PII? Yes. Maybe. With lo
by j16sdiz 3y ago
> (like fraud detection or monitoring your infra)
reCAPTCHA, in this case can be consider as "fraud detection".
Can we do it without PII? Yes. Maybe. With lots of effort and less optimal result.
Does this fit the "necessary" provision of GDPR? This depends on which court you ask.
reCAPTCHA does not add "direct" value to the user, it even cost some harass... but it is a life saver if your service is big spam target.
- account42 3y agoLike any US-based service (or one controlled by a US company), reCAPTCHA is subject to US laws which mean they CANNOT guarantee that your PII is only used for fraud detection purposes because the govermnet can order them at any time to hand over that data while also ordering them to keep silent about that.